WebSec Copilot 🚀
AI-Powered Security Copilot for Modern “Vibe-Coded” Web Apps
A full-stack security auditing platform that scans websites, repositories, packages, CVEs, and code — powered by AI and real-world threat intelligence.
🔥 Why This Project
In today’s AI-driven development era, developers are building faster than ever.
But there is a serious problem.
Security is being ignored.
From exposed APIs to leaked data and vulnerable deployments, the number of cyber attacks is rapidly increasing — especially due to insecure development practices.
WebSec Copilot is built to solve this.
It makes security simple, fast, and actionable — so developers can build fast without compromising safety.
🔍 What WebSec Copilot Scans
🌐 Websites → headers, TLS, cookies, CSP, exposed endpoints
🧠 JavaScript → secrets, tokens, unsafe patterns
📦 Packages → known vulnerabilities & risk analysis
🐙 GitHub Repositories → code issues & misconfigurations
🧾 Code Snippets → AI-based vulnerability detection
🚨 CVEs → real-world exploit intelligence
⚡ Features
🔍 Multi-source audit (URL, repo, CVE, package, snippet)
🛡️ Runtime security scanning
💻 Code vulnerability detection
🧠 AI-powered explanations & fixes
📡 Real-world threat intelligence
🔧 Remediation board (prioritized fixes with code solutions)
📊 Security scoring system
📄 Exportable reports (PDF / JSON / Markdown)
🎮 Demo mode for judges
🧰 Sponsor Tools Used
This project fully utilizes all sponsor tools and integrates them into the core system:
Exa Used for real-time threat intelligence, CVE context, and vulnerability research
Apify Used for scraping security advisories and enriching vulnerability data
Groq / OpenAI Used for ultra-fast AI analysis, explanations, and remediation generation
Convex Used for backend orchestration, database, and real-time scanning pipeline
Cursor Used to accelerate development and build the frontend efficiently while implementing custom logic
Vercel Used for deploying and hosting the production-ready application
🎯 Hackathon Track
Mobbin — Best UI/UX Design
Clean and modern interface inspired by real-world products
Focused on usability and developer experience
Designed with clarity and polished interactions
🧠 AI Usage
AI is deeply integrated into the system:
Analyzes vulnerabilities across multiple sources
Explains security issues in simple, human-readable language
Generates actionable remediation steps
Provides contextual intelligence using real-world data
🏗️ Tech Stack
Technology Purpose
Next.js Frontend + App Router TypeScript Type safety Tailwind CSS Styling shadcn/ui UI system Convex Backend & database Exa API Threat intelligence Apify External data GitHub API Repo analysis Groq / OpenAI AI layer Vercel Deployment Cursor Development acceleration
🌐 Live Demo
👉 https://websec-copilot.vercel.app/
🎥 Demo Video
👉 https://youtu.be/Hb8Q-87aLio?si=sIFzI8vveldRvXS5
💻 GitHub Repository
👉 https://github.com/CodeWithMehru/WebSec-Copilot
⚙️ Local Setup
git clone https://github.com/CodeWithMehru/WebSec-Copilot.git cd websec-copilot npm install
Setup Convex
npx convex dev
Run App
npm run dev
🔐 Environment Variables
Create a .env.local file and add:
NEXT_PUBLIC_CONVEX_URL=your_convex_url EXA_API_KEY=your_exa_key APIFY_API_TOKEN=your_apify_token GITHUB_TOKEN=your_github_token GROQ_API_KEY=your_groq_key CONVEX_DEPLOYMENT=your_convex_deployment NEXT_PUBLIC_CONVEX_SITE_URL=your_convex_site_url
🚀 Vision
WebSec Copilot is not just a hackathon project.
It is designed to evolve into a SaaS-based cybersecurity platform.
Future plans include:
Automated vulnerability patching
Advanced AI-driven security analysis
Continuous monitoring and protection
🧑💻 Author
Mehru Team Leader — F-Society
Built independently during a hackathon with limited time, focusing on solving a real-world problem: making security simple and accessible for every developer.